About the security content of macOS Sequoia 15.2

About the security content of macOS Sequoia 15.2 This document describes the security content of macOS Sequoia 15.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of watchOS11.2

About the security content of watchOS11.2 This document describes the security content of watchOS 11.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Windows Kernel Elevation of Privilege Vulnerability

...

MSC-2024-17713

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

CVE-2023-31073

Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields shortcode-to-display-post-and-user-data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and...

CVE-2023-31073 WordPress Shortcode to display post and user data plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Jose Vega Display custom fields in the frontend – Post and User Profile Fields shortcode-to-display-post-and-user-data allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display custom fields in the frontend – Post and...

MSC-2024-17606

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

MSC-2024-17602

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Suspect publisher – this publisher has a history ...

CVE-2024-47043 Ruijie Reyee OS Insecure Storage of Sensitive Information

Ruijie Reyee OS versions 2.206.x up to but not including 2.320.x could enable an attacker to correlate a device serial number and the user's phone number and part of the email address...

WordPress plugin Online Booking & Scheduling Calendar for WordPress by vcita 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in...

CVE-2024-12094

CVE-2024-12094 concerns the Tinxy mobile app, where logged-in user information is stored in plaintext on the device database. The underlying issue is storage of sensitive data on the device, which can lead to unauthorized access to usernames, email addresses, and mobile numbers if an attacker gai...

CVE-2024-12094 Information Disclosure Vulnerability in Tinxy

This vulnerability exists in the Tinxy mobile app due to storage of logged-in user information in plaintext on the device database. An attacker with physical access to the rooted device could exploit this vulnerability by accessing its database leading to unauthorized access of user information...

Tinxy 安全漏洞

Tinxy is an IoT product application from Tinxy, Inc. A security vulnerability exists in versions prior to Tinxy 663000 that stems from storing logged-in user information in plaintext on the device database, which can lead to unauthorized access to user information...

MSC-2024-17483

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Exfiltrating sensitive private user information –...

PT-2025-11547

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.2 Description The issue allows an app to potentially access sensitive user data due to inadequate checks. This has been addressed with improved checks. Recommendations For versions prior to 15.2, update to macOS...

Malicious code in omigo-data-analytics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae4cfba5955464b4ebdf67da4386ccc25b7431d6dfc11e70146b23c0a8185860 The package looks like a beginning for a further work. In fact, the uploader has shortly published a few similar packages appearing to be e.g. an integration f...

Ant Media Server 安全漏洞

Ant Media Server is a real-time streaming engine software from Ant Media open source. It provides adaptive ultra-low latency streaming by using WebRTC technology with a latency of about 0.5 seconds. A security vulnerability exists in Ant Media Server version v2.8.2, which stems from insufficient...

IrfanView PSP File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability (CNVD-2024-46826)

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. IrfanView PSP file parsing suffers from an out-of-bounds write remote code execution vulnerability caused by a lack of proper validation of user-supplied data, which can be exploited by an...

IrfanView WBZ plugin WB1 file parsing out-of-bounds write remote code execution vulnerability

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. IrfanView WBZ plugin WB1 file parsing suffers from an out-of-bounds write remote code execution vulnerability caused by a lack of proper validation of user-supplied data, which can be...

IrfanView SVG File Parsing Heap Buffer Overflow Remote Code Execution Vulnerability

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. A heap buffer overflow remote code execution vulnerability exists in IrfanView SVG file parsing, which is caused by failing to properly validate the length of user-supplied data before...